#2417 (ok 2.10.1) XSS in browse_foreigners.php

[Marc Delisle]

As reported by Security Reason.

[Marc Delisle]

Logged In: YES
user_id=210714
Originator: YES

Patch:
Index: browse_foreigners.php
===================================================================
--- browse_foreigners.php (revision 10302)
+++ browse_foreigners.php (working copy)
@@ -105,7 +105,7 @@
var element_name = field + '[]';
<?php } ?>

- <?php if (isset($fieldkey)) { ?>
+ <?php if (isset($fieldkey) && is_numeric($fieldkey)) { ?>
var element_name_alt = field + '[<?php echo $fieldkey; ?>]';
<?php } else { ?>
var element_name_alt = field + '[0]';